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Top Stories 

• A large fire that broke out at a recycling facility located on a U.S. Environmental 
Protection Agency Superfund site in Hickman County, Tennessee, caused officials to 
evacuate surrounding schools and homes. - Associated Press (See item 2) 

• Target confirmed reports that criminals stole the payment card information of around 40 
million customers at stores across the U.S. - IDG News Service (See item 4 ) 

• A suspect known as the “Ball Cap Bandit” pleaded guilty to committing 11 bank robberies 
in north Alabama and Tennessee between February 2012 and March 2013. - AL.com (See 
item 8) 

• Researchers developed an attack method that can extract full 4096-bit RSA keys by using a 
microphone or cell phone to listen to the sound generated by a computer’s CPU operations. 
- Softpedia (See item 22) 
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Energy Sector 



1. December 18, U.S. Environmental Protection Agency - (West Virginia) Par Mar Oil 

Co. settles underground storage tank violations at two Huntington, W.Va. 
facilities. Par Mar Oil Co., agreed December 18 to a $30,855 settlement with the U.S. 
Environmental Protection Agency (EPA) to settle claims that the company violated 
underground storage tank regulations at two facilities in Huntington, West Virginia. 
Tanks at the two facilities were used to store gasoline, kerosene, and diesel fuel and 
were cited by the EPA for failing to have had required testing and maintenance 
performed. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/0c0affede4f840bc8525781f00436213/211d7 

2423e8b431c85257c45005clcad!OpenDocument 

For additional stories, see items 10 and 28 
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Chemical Industry Sector 

2. December 19, Associated Press - (Tennessee) Fire crews make progress in Tenn. 
industrial fire. A large fire that broke out December 18 at a plastics and metals 
recycling facility located on a U.S. Environmental Protection Agency Superfund site in 
Hickman County caused officials to evacuate students from four surrounding schools 
and nearby residents from homes due to concerns over two 1000-pound propane tanks 
on the property. 

Source: http://abcnews.go.com/US/wireStorv/crews-evacuate-fire-tenn-superfund-site- 
21265135 

3. December 18, Elmira Star Gazette - (New York) Faulty O-ring may have caused 
hydrogen gas leak. A hydrogen leak from a 6,000 gallon tank with a faulty O-ring at 
an Airgas facility forced the evacuation of multiple homes and businesses in Elmira, 
New York, December 18. 

Source: http://www.stargazette.com/article/20 13121 8/NEWSO 1/3 121 800 1 5/Update- 
Elmira-hydrogen-leak-under-control 

For another story, see item 13 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 



Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. December 19, IDG News Service - (National) Target says hackers likely accessed 40 
million cards. Target confirmed December 18 reports that criminals stole the payment 
card information of around 40 million customers at stores across the U.S., possibly by 
tampering with card swiping machines. Investigators found that the breach may have 
lasted from November 28 to December 15. 

Source: 

http://www.computerworld.eom/s/artiele/9244891/Target says hackers likely accesse 
d 40 million cards 

5. December 19, Beaumont Enterprise - (Texas) Beaumont jury convicts man found 
with 158 fraudulent credit cards. An Ohio man was convicted of credit card fraud in 
Beaumont, Texas, December 18 after he was found in possession of 158 fraudulent 
credit cards and a card encoder during a traffic stop. 

Source: http://www.beaumontenterprise.com/news/article/Beaumont-iurv-convicts- 
man-found-with-158-5078389.php 

6. December 19, Softpedia - (International) ZeuS trojan variant targets accounts of 
BTC China customers. Trusteer researchers discovered a variant of the Zeus banking 
trojan that is designed to steal the login and one-time password information from 
customers of BTC China and other Bitcoin exchanges. 

Source: http://news.softpedia.com/news/ZeuS-Troian-Variant-Targets-Accounts-of- 
BTC-China-Customers-4 10680. shtml 

7. December 18, Reuters - (New Jersey) New Jersey sues Credit Suisse over mortgage 
securities. The attorney general of New Jersey filed a lawsuit December 1 8 against 
Credit Suisse, accusing it of misrepresenting the risk involved in more than $10 billion 
of residential mortgage-backed securities. 

Source: http://www.reuters.com/article/2013/12/18/us-creditsuisse-lawsuit- 
idUSBRE9BH0VQ20 131218 

8. December 18, AL.com - (Alabama; Tennessee) ‘Ball Cap Bandit’ pleads guilty to 11 
bank robberies in north Alabama, Tennessee during yearlong spree. A suspect 
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known as the “Ball Cap Bandit” pleaded guilty December 18 to committing 11 bank 
robberies in north Alabama and Tennessee between February 2012 and March 2013, 
stealing more than $63,000. 

Source: http://blog.al.com/breaking/2013/12/ball cap bandit pleads guilty.html 

9. December 18, Westerly Sun - (Rhode Island) First arrest made in credit card scam 
at Westerly restaurant. Police in Norwich reported that a woman was charged in 
connection with reports of payment card skimming at a restaurant in Norwich 
connected to at least 34 incidents of fraud. Police suspect that others were involved in a 
broader skimming operation. 

Source: http://www.thewesterlysun.com/news/policecourts/3177578-129/first-arrest- 
made-in-credit-card-scam-at-westerly-restaurant.html 

T Return to top i 

Transportation Systems Sector 

10. December 18, Pottsville Republican Herald - (Pennsylvania) 3 coal cars derail in 
Hazle Township. Three railcars derailed in Hazle Township December 17, dumping 
approximately 336 tons of coal in the immediate vicinity. Authorities are investigating 
the cause of the derailment. 

Source: http://republicanherald.com/news/3-coal-cars-derail-in-hazle-township- 
1.1602899 

11. December 19, Harrisburg Patriot-News - (Pennsylvania) 1-81 ramp damaged by May 
tanker fire reopens late Wednesday. The ramp from northbound Interstate 81 onto 
westbound Route 22/322 in Pennsylvania reopened December 18 after more than 7 
months of closure to restore the ramp and an overhead bridge that were damaged when 
a semi-truck overturned and caught fire May 9. 

Source: http://www.pennlive.com/midstate/index.ssf/2013/12/i- 
81 ramp damaged by may tanke.html 

12. December 19, CacheValleyDaily.com - (Utah) Snow closes Sardine Canyon. The 
Utah Highway Patrol closed Sardine Canyon , U.S. Highway 89/91 December 18 after 
heavy snow led to multiple slide-offs and accidents in Box Elder County. The road 
reopened December 19. 

Source: http://www.cachevallevdailv.com/news/local/article 58b33404-68aa-lle3- 
a32f-0019bb30f31a.html 



For another story, see item 28 
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Food and Agriculture Sector 
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13. December 19, U.S. Environmental Protection Agency - (Arizona; California) U.S. EPA 
fines agricultural products companies $74,880 for pesticide violations in 
California and Arizona The U.S. Environmental Protection Agency announced 
settlements had been reached with two companies selling agriculture chemicals in 
Arizona and California over charges of pesticide storage and management violations at 
facilities in the two States between 2011 and 2013, with fines totaling $74,880. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/90f2623201eb56e585257c4600682b617Qp 

enDocument 



14. December 18, Associated Press - (North Dakota) Federal ag disaster money headed 
to 46 ND counties. The U.S. Department of Agriculture declared an agriculture 
disaster in 31 North Dakota counties following major crop losses from snowpack, frost 
and freeze damage, and flooding that prohibited farmers from planting more than 4 
million acres. Supplemental assistance is available to farmers in the affected counties 
and 15 other surrounding counties. 

Source: 

http://www.devilslakeioumal.com/article/20131219/NEWS/131218657/1001/NEWS 
For another story, see item 20 



T Return to top i 

Water and Wastewater Systems Sector 

15. December 18, Daily Astorian - (New York) Astoria city workers injured when 
manhole cover blows. An inflatable plug that malfunctioned December 1 8 during 
water pipe pressure testing in Astoria caused a manhole to pop and hit two workers, 
one of which was seriously injured. 

Source: http://www.dailvastorian.com/free/update-astoria-citv-workers-iniured-when- 
manhoie-covet-Plows/artide 4526kl7c-6844-l 1 e3 a6e5-( >01 9bb2963f4.html 

16. December 18, MetroWest Daily News - (Massachusetts) MWRA recovers costs from 
water main break in Weston. A $3.1 million settlement was reached December 18 
between the Massachusetts Water Resources Authority’s Board of Directors and ten 
parties associated with a water main break in May 2010 on the MetroWest Water 
Supply Tunnel in Weston. The settlement covers costs for restoration work, including 
repairs to the pipeline and to the bank and channel bed of the Charles River. 

Source: http://www.metrowestdailynews.com/news/x915454320/MWRA-recovers- 
costs-from-water-main-break- in-Weston 
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Healthcare and Public Health Sector 

17. December 18, NBC News - (National) CDC issues warning about painful virus from 
mosquitoes. The Centers for Disease Control and Prevention (CDC) confirmed that 10 
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patients on the French side of St. Martin in the Caribbean have contracted the 
Chikungunya virus, which causes headaches, joint pain, rashes, and fevers. The CDC 
warned that the virus’s appearance in the Western Hemisphere means that it was very 
likely to enter the U.S. 

Source: http://www.nbcnews.com/health/cdc-issues-warning-about-painful-virus- 
mosquitoes-2Dl 1765769 
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Government Facilities Sector 

18. December 19, Middletown Times Herald-Record - (New York) Ellenville Elementary 
School evacuated due to electrical fire. Students from Ellenville Elementary School 
in New York were evacuated to a high school December 19 due to a fire attributed to 
an electrical issue. 

Source: http://www.recordonline.com/apps/pbcs.dll/article?AID=/20131219/NEWS/131 

219653 

19. December 18, Minneapolis Star Tribune - (Minnesota) Maple Lake K-12 school 
closes early after bomb threat found. The K-12 Maple Lake School in Wright 
County closed after a bomb threat was reportedly found on a bathroom wall, sending 
over 900 students home for the day. 

Source: http://www.startribune.com/local/west/23642988 1 .html 

20. December 17, Honolulu Star Advertiser - (Hawaii) Bad spaghetti blamed in 
Waipahu Elementary food-poisoning. State health officials concluded that a food 
poisoning outbreak that sickened more than 30 children and 2 adults at Waipahu 
Elementary School in Hawaii December 10 was caused by improperly prepared 
spaghetti. 

Source: 

http://www.staradvertiser.com/news/breaking/20131216 Spaghetti prep blamed in fo 
odpoisoning outbreak at Waipahu Elementary.html?id=236133111 

For another story, see item 2 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 



21. December 19, Help Net Security - (International) OpenX/Revive Adserver zero-day 
actively exploited in the wild. A researcher discovered a zero-day vulnerability in 
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open-source advertising server OpenX Source that could allow an attacker to gain back- 
end access. The researcher reported that the vulnerability is being actively exploited in 
the wild. 

Source: http://www.net-securitv.org/secworld.php7km6136 

22. December 19, Softpedia - (International) Full 4096-bit RSA keys extracted by 
listening to the sound made by computers. Researchers reported in a paper that they 
developed an attack method that can extract full 4096-bit RSA keys by listening to the 
sound generated by a computer’s CPU operations. The sound can be picked up by 
dedicated microphones or by a phone. 

Source: http://news.softpedia.com/news/Full-4096-bit-RSA-Kevs-Extracted-by- 
Listening-to-the-Sound-Made-by-Computers-410710.shtml 

23. December 19, The Register - (International) Macbook webcams CAN spy on you - 
and you simply CAN’T TELL. Researchers confirmed that the webcams in 
MacBooks can be used to spy on users without an LED warning light being turned on. 
The researchers released a proof-of-concept demonstrating how the hardware interlock 
that normally ties camera and LED activation together can be disabled to allow 
independent operation of either. 

Source: http://www.theregister.co.uk/2013/12/19/apple isight webcam led hack / 

24. December 18, Dark Reading - (International) Washington Post servers infiltrated, 
employee credentials stolen. The Washington Post confirmed that some of its servers 
were compromised by attackers who were able to access encrypted employee 
usernames and passwords. 

Source: http://www.darkreading.com/attacks-breaches/washington-post-servers- 
infiltrated-empl/240 164882 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



25. December 19, Baltimore Sun - (Maryland) Crews battle three-alarm fire in 
Northwest Baltimore apartment complex. A three-alarm fire at a northwest 
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Baltimore apartment complex damaged 18 apartments and temporarily displaced 27 
people December 19. 

Source: http://www.baltimoresun.com/news/maryland/baltimore-citv/bs-md-ci-three- 
alarm-fire-20131219,0,6546594.story 



26. December 19, WCNC 22 Charlotte - (North Carolina) Several homeless after fire 
damages local apartments. A fire at the Country Club Apartments in Charlotte 
displaced two dozen and caused $250,000 in damages December 18. 

Source: http://www.wcnc.com/news/local/Massive-fire-damages-east-Charlotte- 
apartment-building-23650987 1 .html 

27. December 19, Bluffton Island Packet - (South Carolina) Apartment fire displaces 14 
families on Hilton Head Island. A fire at the Wyndemere apartments on Hilton Head 
Island December 18 displaced 14 families and damaged 18 units, 6 of which were 
rendered unlivable. 

Source: http://www.islandpacket.com/2013/12/19/2856355/firefighters-work-through- 
night.html 

28. December 18, AL.com - (Alabama) Investigators suspect leak in natural gas 
distribution line in deadly Gate City apartment explosion. National Transportation 
Safety Board (NTSB) investigators suspected that a leak in a natural gas distribution 
pipe caused an explosion that destroyed the Gate City apartment building in 
Birmingham December 17, killing one and injuring eight others. The NTSB continues 
to investigation the incident. 

Source: http://blog.al.com/spotnews/2013/12/investigators suspect leak in.html 
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Dams Sector 



29. December 18, WWL 4 New Orleans - (Mississippi) Issac-damaged canal lock in 
Pearl River repaired more than a year later. Lock #2 of the Pearl River Navigation 
Canal that was damaged in Hurricane Issac was repaired November 26 by the U.S. 
Army Corps of Engineers at a cost of $160,000. The project was completed ahead of a 
January 2014 schedule. 

Source: http://www.wwltv.com/news/local/Isaac-damaged-canal-lock-in-Pearl-River- 
repaired-more-than-a-year-later-23646407 1 .html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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